Leonardo de Moura

This is a follow-up to Postmortem for Kernel Soundness Bug #14576.

A soundness bug in the Lean kernel (#14576) was reported and fixed during the week of July 27.

Signal Shot is a public moonshot to verify the Signal protocol and its Rust implementation using Lean.

Markus de Medeiros wanted to understand garbled circuits.

Next Monday, I am giving the Cray Distinguished Colloquium at the University of Minnesota Department of Computer Science & Engineering.

In 2026, a skilled researcher using Claude (Opus 4.6), with real-time support from the Rocq development team, found seven kernel bugs in Rocq, a widely used proof assistant.

This website is now built with Verso, the documentation tool for Lean.

Consider this goal: example {α} [CommRing α] [IsCharP α 0] [NoNatZeroDivisors α] (d t d_inv : α) (Δ40 : d * (d + t + d * t) = 0) (Δ41 : d^2 * (d + d * t - 2 * d * t^2 + d * t^4 + d^2 * t^4) = 0) (_ : d * d_inv = 1) : t + 2 * t^2 - t^3 - 2 * t^4 + t^5 = 0…

We are building sym =>, a new interactive tactic mode for writing scalable verification proofs in Lean.

Code Metal recently raised $125 million to rewrite defense industry code using AI.

AI is transforming how we write formal proofs.